b6975fa37b2c0746ed9bfca73d959f647bad6e01557cc390b4e363fb2a6691d9

Analysis

max time kernel
126s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2024, 21:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6261d03faa1dfe7fc0d09f0988c1484d1ca8bbadd5747787b916becd8e2bec0f.exe
Size

16KB
MD5

65c51582e5d14430a07fa6990fb9e6da
SHA1

e811e4261a8020d1332cc85a27031ed82bbdea29
SHA256

6261d03faa1dfe7fc0d09f0988c1484d1ca8bbadd5747787b916becd8e2bec0f
SHA512

cbbd1ef2791740af7dd502c64db036d05b277c864196fa92bef89f9fc3dc58f3da2e7be31e0641bc4c6d4af7c0e5cf1d78033bb650b534b2b71cb1faa9bd40ca
SSDEEP

192:yQBggb9Q2bekJBqhzCIIIQlTtGSdxOjoEMIpLTf1yS9XnHSMUF8:yQ3bXykJBqhz9QhtGSdYDToS9XHSbO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6261d03faa1dfe7fc0d09f0988c1484d1ca8bbadd5747787b916becd8e2bec0f.exe

C:\Users\Admin\AppData\Local\Temp\6261d03faa1dfe7fc0d09f0988c1484d1ca8bbadd5747787b916becd8e2bec0f.exe
"C:\Users\Admin\AppData\Local\Temp\6261d03faa1dfe7fc0d09f0988c1484d1ca8bbadd5747787b916becd8e2bec0f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3708,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
1⤵
PID:2792

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...